Behavioral task
behavioral1
Sample
83a378452219fb1709cc733edde85f78_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83a378452219fb1709cc733edde85f78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83a378452219fb1709cc733edde85f78_JaffaCakes118
-
Size
1.4MB
-
MD5
83a378452219fb1709cc733edde85f78
-
SHA1
bfed8b7f1531c0307aefe07f863a2f64a109de9b
-
SHA256
4cddc26feb9c93188a706d9236e0e4efdd08d8515546a85ab74b6142f3c18b6b
-
SHA512
755108d8962a37cc659daa71a96300a7f6128007132421b390e1041788e175a5adf49326a9c34f3c1b3feb25abb429e55faf851cc515b3b1e6f778adb2dfa532
-
SSDEEP
24576:bj4tQKqU/ATH2NFGwaX6ZSZav+EB6xaPCqMVP8/I3BVEJ1E1EYZJUDaUci:bctOyAiNFG5/YvesPZ28/IxVEzGZWDa4
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83a378452219fb1709cc733edde85f78_JaffaCakes118
Files
-
83a378452219fb1709cc733edde85f78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1005KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 433KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE